Overview

overview

10

Static

static

8

136f34bf09...92.exe

windows7-x64

10

136f34bf09...92.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    37s
  • max time network
    47s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    29-01-2023 18:28

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    136f34bf0924e403ad31351a90a26c3d91d86c9d9733ae2c119d1461b3958492.exe

  • Size

    194KB

  • MD5

    d383a77aed7e0bd1de37b48aca8f01ef

  • SHA1

    3607766989599dc1014ee184c21298e8d22e8609

  • SHA256

    136f34bf0924e403ad31351a90a26c3d91d86c9d9733ae2c119d1461b3958492

  • SHA512

    f313de8e2d7576b7effb85a3fc2f63d3249fccc59471403c9f3c2c6cc831106b4541f93ca617db67acd32d75433b66dd40331375454249537a155055bc10359e

  • SSDEEP

    3072:jI26cn0EWph0EdY5cHy2Id1fxO4uYLgGFuEfAduSnlVoJRDqP0WrWO8tS:M2P2ph0A0NLf8yYN0JhqFrWO8U

Score
10/10
azorultinfostealertrojan

Malware Config

Extracted

Family

azorult

C2

http://horseliker.ac.ug/index.php

Signatures

  • Azorult

    An information stealer that was first discovered in 2016, targeting browsing history and passwords.

    trojaninfostealerazorult

Processes

  • C:\Users\Admin\AppData\Local\Temp\136f34bf0924e403ad31351a90a26c3d91d86c9d9733ae2c119d1461b3958492.exe
    "C:\Users\Admin\AppData\Local\Temp\136f34bf0924e403ad31351a90a26c3d91d86c9d9733ae2c119d1461b3958492.exe"
    1⤵
      PID:1880

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1880-54-0x0000000000811000-0x0000000000822000-memory.dmp
      Filesize

      68KB

      Download
    • memory/1880-55-0x0000000075201000-0x0000000075203000-memory.dmp
      Filesize

      8KB

      Download
    • memory/1880-56-0x0000000000400000-0x0000000000752000-memory.dmp
      Filesize

      3.3MB

      Download
    • memory/1880-57-0x0000000000811000-0x0000000000822000-memory.dmp
      Filesize

      68KB

      Download
    • memory/1880-58-0x0000000000400000-0x0000000000752000-memory.dmp
      Filesize

      3.3MB

      Download